CVE-2021-22530CWE-667

Improper account management vulnerability in NetIQ Advance Authentication

High · published August 28, 2024

CVSS v3.1
8.2
EPSS
0%
Percentile
12.9
In the wild
Unconfirmed
What it is

A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login. This issue may lead to user account compromise if successful or may impact server performance. This issue impacts all NetIQ Advance Authentication before 6.3.5.1

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00228 · 12.9th percentile
Weakness
CWE-667 · Improper Locking
Published
2024-08-28T06:29Z
EPSS history
Timeline
  • 28 AUG 06:29Z
    Improper account management vulnerability in NetIQ Advance Authentication
    cvelistv5